It’s a beautiful fall afternoon and I have the day off. What are you all working on today? I’ve been working on a script that pulls in updates for a number of Git repositories at once in order to keep an updated local archive of them.

Today, I’m making it resilient against the maintainer force-pushing an empty branch in an attempt to foil archives. There’s still some more work to do, but I just ran a successful test.

The complete history of the repository is backed up in the bundle before the evil maintainer’s force push is brought in.

Output of my Git script when detecting a malicious forced push
Download

Output of my Git script when detecting a malicious forced push

⤋ Read More